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Cross-industry and standards development organisations open letter on the EU Cybersecurity 
certification framework proposal 


Our associations represent more than 56 000 companies in Europe in key areas for jobs and economic 
development in Europe. 


Ahead of the expected vote on 10 July in the European Parliament’s Industry, Research and Energy (ITRE) 
committee, we urge European decision-makers to ensure that the EU cybersecurity certification framework 
will not be detrimental to the competitiveness of the EU industry and will rather support a flexible and future- 
proof framework. The Cybersecurity Act aims to harmonise the Single Market and contribute to the 
establishment of the Digital Single Market, increase cybersecurity in Europe and turn the EU cybersecurity 
certification schemes into a competitive advantage for the industry and a globally-recognised instrument. 


Our associations have, however, a number of recommendations as regards ongoing political discussions, and 
therefore call on the European Parliament to consider with specific attention the five following points: 


1. The voluntary approach to certification is key for it to remain a competitive advantage for the 
industry and avoid unintended consequences both on smaller market actors and on already heavily 
regulated sectors. We therefore recommend keeping the voluntary nature of the certification 
framework, possibly to be reviewed at a later stage, according to the evolution of the cybersecurity 
landscape. To avoid potential Single Market fragmentation, it is key to avoid a situation, where 
national legislation can mandate a scheme. 


2. Conformity assessment methods and requirements should be defined in the schemes and not in 
the regulation itself so as to allow for a fit-for-purpose approach according to risks and use cases. 
Allowing for self-declaration of conformity is fundamental to streamline the certification process and 
make it accessible to all market actors. 


3. A clear framework for the participation of the industry should be defined, to make sure ENISA 
collaborates openly with the industry when preparing, elaborating and adopting candidate schemes. 
We support the proposal of the European Parliament to set specific ad-hoc consultation platforms 
but to occur on a systematic basis with formal rules to ensure a level playing field for stakeholders’ 
representation. A positive step to this direction can also be the proposal for the establishment of a 
“Stakeholder Certification Group”. 


4. The adoption of the schemes should include a process to ensure that they are aligned or could take 
part in existing international mutual recognition agreements to ensure that the EU certificates are 
globally recognised. 


5. Reference to global standards should prevail. This includes European Standards, International 
Standards, and Technical Specifications, that have been developed in accordance with defined 
principles in EU standardisation legislation (i.e. Annex II of Regulation EU 1025/2012), developed in 
an inclusive and transparent way. Allowing for any deviation from this principle creates uncertainty 
for market players and would need to be clarified. 


About AFME 

AFME (Association for Financial Markets in Europe) 
advocates for deep and integrated European capital 
markets which serve the needs of companies and 
investors, supporting economic growth and benefiting 
society. AFME is the voice of all Europe’s wholesale 
financial markets, providing expertise across a broad 
range of regulatory and capital markets issues. AFME 
aims to act as a bridge between market participants and 
policy makers across Europe, drawing on its strong and 
long-standing relationships, its technical knowledge and 
fact-based work. Its members comprise pan-EU and 
global banks as well as key regional banks, brokers, law 
firms, investors and other financial market participants. 
AFME participates in a global alliance with the Securities 
Industry and Financial Markets Association (SIFMA) in 
the US, and the Asia Securities Industry and Financial 
Markets Association (ASIFMA) through the GFMA 
(Global Financial Markets Association). For more 
information please visit the AFME website: 
www.afme.eu. Follow us on Twitter @AFME_EU 


About Agoria 

Agoria brings together and defends the interests of 
companies in the technology industry. The federation is 
committed to the future of these companies and the 
nearly 275,000 people they employ. With 1,900 member 
companies, Agoria is the largest sectoral employers’ 
federation in Belgium. 


About APPLiA 

APPLIiA is a Brussels-based trade association that 
provides a single, consensual voice for the home 
appliance industry in Europe. It promotes the industry’s 
general mission to increase product innovation while 
reducing the environmental impact of appliances. 
APPLiA members produce the following type of 
appliances: 

eLarge appliances such as refrigerators, freezers, ovens, 
dishwashers, washing machines and dryers; 

¢Small appliances such as vacuum cleaners, irons, 
toasters and toothbrushes; 

eHeating, ventilation and air conditioning appliances 
such as air conditioners, heat pumps and local space 
heaters. 

The home appliance industry is an important European 
economic player. 

- Generating wealth: the total annual turnover of the 
industry in Europe is €47.6bn (2016) 

- Providing good employment: 

- Total employment as a result of the presence of the 
sector: approximately 889.192 jobs, 

- Direct employment: 202.089 jobs 

- investment in the future: €1.4bn contribution to 
research and development activities in Europe. 


About Danish Chamber of Commerce 

The Danish Chamber of Commerce is the network for the 
service industry in Denmark. It is one of the largest 
professional business organisations in Denmark with 


more than 200 employees, offices in Copenhagen, 
Aarhus and in Brussels. The Chamber represents 17,000 
Danish companies and 100 trade associations within 
trade, tourism, business services, IT, welfare services 
and transportation. 


About DIGITALEUROPE 

DIGITALEUROPE represents the digital technology 
industry in Europe. Our members include some of the 
world's largest IT, telecoms and consumer electronics 
companies and national associations from every part of 
Europe. DIGITALEUROPE wants European businesses 
and citizens to benefit fully from digital technologies and 
for Europe to grow, attract and sustain the world's best 
digital technology companies. DIGITALEUROPE ensures 
industry participation in the development and 
implementation of EU policies. 

DIGITALEUROPE’s members include in total over 35,000 
ICT Companies in Europe represented by over 63 
Corporate Members and 39 National Trade Associations 
from across Europe. Our website provides further 
information on our recent news and activities: 
http://www.digitaleurope.org 


About EBF 

The European Banking Federation is the voice of the 
European banking sector, uniting 32 national banking 
associations in Europe that together represent some 
3,500 banks - large and small, wholesale and retail, local 
and international - employing about 2.1 million people. 
EBF members represent banks that make available loans 
to the European economy in excess of €20 trillion and 
that securely handle more than 300 million payment 
transactions per day. Launched in 1960, the EBF is 
committed to creating a single market for financial 
services in the European Union and to supporting 
policies that foster economic growth. www.ebf.eu 
@EBFeu 


About OpenForum Europe 

OpenForum Europe (OFE) is a not-for-profit, 
independent European based think tank which focuses 
on openness within the IT sector. We draw our support 
not only from some of the most influential global 
industry players, but most importantly from across 
European SMEs and consumer organisations and the 
open community. OFE also hosts a global network of 
OpenForum Academy Fellows, each contributing 
significant innovative thought leadership on core topics. 
Views expressed by OFE do not necessarily reflect those 
held by all its supporters. 


About Syntec Numerique 

Syntec Numérique is the first professional organization 
within the French digital ecosystem with more than 
2000 members ranging from large corporations to start- 
ups. Its members span software industry, engineering, 
technology consulting or operations, and their business 
cover the full spectrum of digital sector from data 
economy to cybersecurity, loT, mobility or ehealth. 


